CVE-2026-106931KEV · due Oct 23CWE-78command-injection

EG Secure Solutions SiteGuard Server Edition OS Command Injection Vulnerability

High · published October 14, 2026

Patch now

Confirmed exploited, and the score agrees

CVSS calls it high at 7.8. It is confirmed in active exploitation. It sits in the 50.8th percentile for exploit probability.

1
days to CISA
deadline
CVSS v3.0
7.8
EPSS
1%
Percentile
50.8
In the wild
Confirmed
What it is

SiteGuard Server Edition contains an OS command injection vulnerability, which may allow an attacker to execute arbitrary OS commands with root or SYSTEM privileges on the system running the affected product.

The record
Technical detail
CVSS v3.0
7.8 · HIGH
Vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
8.5 · CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00662 · 50.8th percentile
Weakness
CWE-78 · Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Published
2026-10-14T09:16Z
KEV added
2026-10-20 · due 2026-10-23
Affected products (27)
ProductVersionsFixed in
e-guardian/siteguard≥ 2.20, < 8.008.00
e-guardian/siteguardall versions—
e-guardian/siteguardall versions—
e-guardian/siteguardall versions—
e-guardian/siteguardall versions—
e-guardian/siteguard≥ 2.20, < 7.007.00
e-guardian/siteguardall versions—
e-guardian/siteguardall versions—
e-guardian/siteguardall versions—
e-guardian/siteguardall versions—
e-guardian/siteguardall versions—
e-guardian/siteguardall versions—
e-guardian/siteguardall versions—
e-guardian/siteguardall versions—
e-guardian/siteguard≥ 2.20, < 8.008.00
e-guardian/siteguardall versions—
e-guardian/siteguardall versions—
e-guardian/siteguard≥ 2.20, < 7.007.00
e-guardian/siteguardall versions—
e-guardian/siteguardall versions—
e-guardian/siteguardall versions—
e-guardian/siteguardall versions—
e-guardian/siteguardall versions—
e-guardian/siteguardall versions—
e-guardian/siteguard≥ 2.20, < 3.103.10
e-guardian/siteguard≥ 4.10, < 8.008.00
e-guardian/siteguardall versions—
References (3)
https://jvn.jp/en/jp/JVN88474777/ · [email protected]https://www.eg-secure.co.jp/siteguard/news/alert-202610-1 · [email protected]https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-106931 · 134c704f-9b21-4f2e-91b3-4a467353bcc0
EPSS history
Timeline
  • 15 OCT 03:28Z
    EPSS moved — → 1%
    epss
  • 14 OCT 04:45Z
    SiteGuard Server Edition contains an OS command injection vulnerability, which may allow an attacker to execute arbitrary OS commands with root or SYSTEM…
    cvelistv5
  • 14 OCT 04:45Z
    SiteGuard Server Edition contains an OS command injection vulnerability, which may allow an attacker to execute arbitrary OS commands with root or SYSTEM…
    cvelistv5